CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14865

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 17.0%

CVSS Severity

CVSS v3 Score 5.3

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rlb-xxe-injection-client-state-cve-2026-14865

Products affected by CVE-2026-14865

Progress » Telerik Ui For Asp.net Ajax » Version: 2009.31314

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31314
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1309

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1309
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1415

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1415
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1519

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1519
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2713

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2713
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2826
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2929

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2929
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31109

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31109
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31215
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31317

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31317
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1.315

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1.315
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1315

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1315
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1413

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1413
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1519

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1519
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.2712

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2712
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.2915

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2915
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.3.1305

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.3.1305
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.31115

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.31115
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.1.215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.215
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.1.411

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.411
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.607

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.607
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.724

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.724
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.912

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.912
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1016

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1016
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1205

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1205
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1308

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1308
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.220

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.220
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.403

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.403
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.417

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.417
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.2.611

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.611
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.2.717

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.717
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1015

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1015
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1114

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1114
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1324

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1324
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.1.403

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.403
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.2.618

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.618
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.2.724

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.724
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.3.1024

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1024
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.3.1209

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1209
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.1.204

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.1.204
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.604

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.604
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.623

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.623
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.729

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.729
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.826
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.3.1111

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.3.1111
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.3.930

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.3.930
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.1.113

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.1.113
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.2.504

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.2.504
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.2.607

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.2.607
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.1018

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.1018
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.1027

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.1027
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.914

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.914
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.1.118

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.1.118
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.1.228

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.1.228
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.503

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.503
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.621

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.621
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.711

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.711
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.3.913

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.3.913
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.1.117

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.1.117
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.2.516

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.2.516
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.2.710

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.2.710
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.3.910

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.3.910
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.1.115

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.1.115
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.1.215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.1.215
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.2.514

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.2.514
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.3.1023

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.3.1023
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.3.917

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.3.917
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.1.114

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.1.114
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.1.219

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.1.219
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.2.5112

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.2.5112
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.2.617

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.2.617
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.3.1021

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.3.1021
Progress » Telerik Ui For Asp.net Ajax » Version: 2020.3.915

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2020.3.915
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.1.119

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.1.119
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.1.224

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.1.224
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.1.330

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.1.330
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.2.511

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.2.511
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.2.616

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.2.616
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.3.1111

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.3.1111
Progress » Telerik Ui For Asp.net Ajax » Version: 2021.3.914

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.3.914
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.1.119

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.1.119
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.1.302

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.1.302
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.2.511

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.2.511
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.2.622

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.2.622
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.3.1109

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.3.1109
Progress » Telerik Ui For Asp.net Ajax » Version: 2022.3.913

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2022.3.913
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.1.117

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.1.117
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.1.314

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.1.314
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.1.323

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.1.323
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.2.606

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.2.606
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.2.714

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.2.714
Progress » Telerik Ui For Asp.net Ajax » Version: 2023.3.1010

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2023.3.1010
Progress » Telerik Ui For Asp.net Ajax » Version: 2024.1.131

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2024.1.131
Progress » Telerik Ui For Asp.net Ajax » Version: 2024.2.513

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2024.2.513
Progress » Telerik Ui For Asp.net Ajax » Version: 2024.3.805

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2024.3.805
Progress » Telerik Ui For Asp.net Ajax » Version: 2024.4.1113

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2024.4.1113
Progress » Telerik Ui For Asp.net Ajax » Version: 2024.4.1114

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2024.4.1114
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.1.211

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.1.211
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.1.218

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.1.218
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.1.416

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.1.416
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.2.520

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.2.520
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.2.528

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.2.528
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.2.609

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.2.609
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.3.812

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.3.812
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.3.825

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.3.825
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.4.1111

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.4.1111
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.4.1210

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.4.1210
Progress » Telerik Ui For Asp.net Ajax » Version: 2025.4.1321

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2025.4.1321
Progress » Telerik Ui For Asp.net Ajax » Version: 2026.1.211

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2026.1.211
Progress » Telerik Ui For Asp.net Ajax » Version: 2026.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2026.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2026.1.421

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2026.1.421
Progress » Telerik Ui For Asp.net Ajax » Version: 2026.2.519

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2026.2.519

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14865

Products

Pricing

Contact Us